Remove 11
article thumbnail

CNIL Launches Public Consultation on Draft Standards on Data Processing for Managing Business Activities and Unpaid Invoices

Hunton Privacy

Following the 2018 update to the French Data Protection Act for purposes of implementing the EU General Data Protection Regulation (“GDPR”), the CNIL may issue guidelines, recommendations or standards called “Referentials.” The public consultation on the two draft Referentials will be open until January 11, 2019.

GDPR 81
article thumbnail

ISO 27001 training in Birmingham

IT Governance

Implementing an ISO 27001-certified ISMS can help your organisation avoid the penalties and losses associated with data breaches, and comply with legal and regulatory requirements, such as the General Data Protection Regulation (GDPR). Date: 11–13 April 2018. Our team led the world’s first ISO 27001 certification project.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

UK Supreme Court Rules Morrisons Not Vicariously Liable for Malicious Data Breach by Employee

Data Matters

This is particularly important as enforcement actions and significant fines by European supervisory authorities under the GDPR, as well as moves to bring mass privacy claims, are increasing. In November 2013, during an external audit, Skelton had to provide payroll data to KMPG, which he duly did. 1 [2016] UKSC 11.

article thumbnail

FRANCE: NEW GUIDELINES FOR COOKIES AND AN ACTION PLAN FOR ONLINE TARGETED ADVERTISING

DLA Piper Privacy Matters

The French Data Protection Supervisory Authority (CNIL) has finally decided to replace its recommendations of 2013 which were no more compliant with the GDPR, by new guidelines. The CNIL reminds that consent to cookies deposit must be compliant with the definition and conditions set forth in Articles 4(11) and 7 of the GDPR.

GDPR 40
article thumbnail

FRANCE: ONE MORE STEP TO ENSURE CONSISTENCY OF THE NEW FRENCH DATA PROTECTION LAW

DLA Piper Privacy Matters

On 12 December 2018, the French Government issued an ordinance [1] finalizing, at the legislative level [2] , the alignment of the French Data Protection Law (“FDPL”) with the General Data Protection Regulation [3] (“GDPR”) and the Directive 2016/680 [4]. Following-up the adoption of the GDPR, the French Law No.

GDPR 49
article thumbnail

SCHREMS 2.0 – the demise of Standard Contractual Clauses and Privacy Shield?

DLA Piper Privacy Matters

If this happens, many organisations will be left without any practical solution to legitimise the international transfer of personal data outside the EEA and exposure to the threat of GDPR revenue based fines, regulatory sanctions including injunctions and third party claims for compensation. Why are SCCs and Privacy Shield important?

Privacy 94
article thumbnail

UK: Supreme Court judgment in Morrisons – employer not vicariously liable for data breach

DLA Piper Privacy Matters

In November 2013, an aggrieved Morrisons employee, Andrew Skelton, downloaded payroll data he was entrusted with at work onto a personal USB stick. The court declined to specifically consider the General Data Protection Regulation, (EU) 2016/679 (“GDPR”). 2 Mohamud v WM Morrison Supermarkets plc [2016] UKSC 11; [2016] AC 677.